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Abstract 

This paper presents a bimodal logic for reasoning about knowledge 
during knowledge acquisition. One of the modalities represents (effort 
during) non-deterministic time and the other represents knowledge. The 
semantics of this logic are tree-like spaces which are a generalization of 
semantics used for modeling branching time and historical necessity. A 
finite system of axiom schemes is shown to be canonically complete for 
the formentioned spaces. A characterization of the satisfaction relation 
implies the small model property and decidability for this system. 

1 Introduction 

The notion of possible world dominates the literature in modal logic, via Kripke 
models, as well as in any logic dealing with the epistemic state of a reasoner. The 
heart of this popularity lies in the identification of an intentional state through 
common properties of extensional objects. Apart from genuine problems such 
as logical omniscience this representation suffers from, it is limited in a static 
description of the reasoner 's epistemic state. The "logic of knowing" is not only 
embodied in the representation of knowledge but also in the way knowledge is 
acquired. We do not refer to temporal properties but rather to methodology 

(though both can be intertwined). 

Recently a family of logics was introduced ( iMP92| , iGeo94a| , [lGeo93| , |DMP| ) 



with the intention to fill this void. It succeeds in doing so by attaching familiar 
mathematical structures such as spaces of subsets, topologies and complete lat- 
tices of subsets corresponding to a natural knowledge acquisition. This paper 
extends this work by introducing a bimodal logic belonging to the same family 
of logics and establishes a correspondence between a particular epistemic pro- 
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cess of knowledge acquisition with a space of subsets forming a tree (treelike 
space). 

In our framework the view of a reasoner will be represented by a set of 
possible worlds. Each of these worlds represents an alternative state compatible 
with the reasoner's knowledge of actual state. This treatment of knowledge 
agrees with the traditional one ( |Hin62| |, pM84[ , [ |PR85t , | pM86[ ) expressed 



in a variety of contexts (artificial intelligence, distributed processes, economics, 
etc). 

We are interested in formulating a basic logical framework for reasoning 
about a resource-conscious acquiring of knowledge. Such a framework can be 
applied to many settings such as the ones involving time, computation, phys- 
ical experiments or observations. In these settings an (discrete or continuous) 
increase of information available to us takes place and results in an increase of 
our knowledge. How could this simple idea be embodied in the formentioned 
semantical framework? An increase of knowledge can be represented with a 
restriction of the knower's view, i.e. of the equivalence class of the alternative 
worlds. This restriction is nondeterministic (we do not know what kind of ad- 
ditional information will be available to us, if at all) but not arbitrary: it will 
always contain the actual state of the knower, i.e. it is a neighborhood restriction 
of the actual state. In this way, set-theoretic considerations come in. 

A discrete version of our epistemic framework can arise in scientific exper- 
iments or tests. We acquire knowledge by "a step-by-step" process, each step 
being an experiment or test. The outcome of such an experiment or test is 
unknown to us beforehand, but after being known it restricts our attention 
to a smaller set of possibilities. A sequence of experiments, tests, or actions 
comprises a strategy of knowledge acquisition. This model is in many respects 
similar to Hintikka's "oracle" (see IIin86| ). In Hintikka's model the "inquirer" 



asks a series of questions Qi, Q2, ■ ■ ■ , Qn, ... to an external information source, 
called "oracle" (can be thought as a knowledge base). The oracle answers yes 
or no and the inquirer increases his or her knowledge by this piece of additional 
evidence. At any point of this process the inquirer follows a branch of a tree 
determined by the possible answers to his or her series of questions. Such an 
interrogative model is recognized by Gadamer (| Gad75[ ) as an important part 



of the epistemic process. Consider the following example: 

Example: Suppose that our view, the set of possible worlds, is {(71, 92, (73, 54} 
and our query consists of two questions Qi, Q2, in that order. The answer to 
Qi is yes in 51, 52 and no in (73, (74. The answer to Q2 is yes in qi, (72, 93 and 
no in 94. Then the possible sequences of knowledge states comprise a tree of 
subsets as shown in Figure g. The space of subsets labeling the nodes of the 
tree will be called a treelike space. 

The above example shows a transition from the symbolic description of the 
epistemic process to a description in spatial terms. Instead of going down a 
proof tree, the one which entails the desired formulae, we intersect nodes of a 
tree labeled by subsets of a space. This transition is direct; it enables us to 
think in geometric terms. 
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Figure 1: A knowledge acquisition tree. 



Now consider the following example: 

Exam,ple: Suppose that a machine emits a stream of binary digits representing 
the output of a recursive function /. After time ti the machine emitted the 
stream 111. The only information we have about the function being computed 
at this time on the basis of this (finite) observation is that 



As far as our knowledge concerns, / is indistinguishable from the constant func- 
tion 1, where l(n) = 1 for all n. After some additional time t2, i-c spending 
more time and resources, might appear and thus we could be able to distin- 
guish / from 1. In any case, each binary stream will be an initial segment of 
/ and this initial segment is a neighborhood of /. In this way, we can acquire 
better knowledge of the function the machine computes. The space of finite 
binary streams is a structure which models computation. The sets of binary 
streams under the initial segment ordering is an example of a treelike space. 

The above example shows how the same epistemic process appears during 
observations of programs. Here possible worlds correspond to (total) computa- 
tions and our view to observations. We can apply the same spatial reasoning to 
programs through the following correspondence: 



Therefore a common idea lies behind the knowledge-theoretic, spatial and 
computational framework. The connection between the last two is not new. 
Here is how this epistemic framework ties with previous work on establishing 
links between spatial reasoning and reasoning about programs. 



/(I) = /(2) = /(3) = 1. 



Knowledge states = Sets = Observations 
Possible worlds = Points = Computations. 
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We use two modalities K for knowledge and □ for effort, i.e. spending of 
resources. Consider the formula 



A OKA, 



where A is an atomic predicate and O is the dual of the □, i.e. O = -iD-i. It 
will be clear after the presentation of semantics in Section 2.1 that if the above 
formula is valid, then the set which A represents is an open set of the topology 
generated by the subsets of the treelike space as a basis. Under the reading of 
O as "possible" and K as "is known" , the above formula says that 

"if A is true then it is possible for A to be known" , 



i.e. A is affirmative. Vickers defines similarly an affirmative assertion in |Vic89 



"an assertion is affirmative iff it is true precisely in the circumstances 
when it can be affirmed." 

Affirmative and refutative assertions are closed under infinite disjunctions and 



conjunctions, respectively. Smyth in | Smy83 | observed first these properties in 
semi-decidable properties. Semi-decidable properties are those properties whose 
truth set is r.e. and are a particular kind of affirmative assertions. In fact, 
changing our power of affirming or computing we get another class of properties 
with a similar knowledge-theoretic character. For example, using polynomial 
algorithms affirmative assertions become polynomially semi-decidable, i.e. NP 
properties. If an object has this property then it is possible to know it with a 
polynomial algorithm even though it is not true we know it now. 

Our approach has an independent theoretical interest. A new family of 
Kripke frames, called subset frames, arises. These are Kripke frames which are 
equivalent to sets of subsets. In particular, we have identified those which are 
equivalent to (complete) lattices of subsets and topologies (see Geo93|). In 



this paper, we shall identify those which correspond to the above interrogative 
model, called treelike spaces. Treelike spaces have a particular interest; they 
correspond to an indeterminist's theory of time called Ockhamism (see [Pri67|), 
which gives rise to branching time. We refer the reader to section 2.1 for a 
detailed discussion. 



A family of logics for knowledge and time is studied in |EIV89| and various 
complexity results are established. However, the framework of the above logics 
is restricted to distributed systems and their interpretation differs significantly 
from ours. 

Interpreting the knowledge modal operator as a universal quantifier we 
present a novel way of understanding the meaning of quantifiers in varying 



(ordered) domains (see section 2.2 for a relevant discussion). This is one of the 
main difficulties in formulating a meaningful first-order system for modal logic 



(see |Fit93| for a discussion). 

The language and semantics of our logical framework is presented in Sec- 
tion |. In the same section, we present two systems which belong to the same 
family of logics, studied in |MP92|, |Geo93 and |Geo94a]. In Section pi we 
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present an axiomatization, called MPT, for our semantics and we prove com- 
pleteness, small model property, and decidability. 

A preliminary version of this paper has appeared in [ ]Geo94b . 



2 Two Systems: MP and MP' 
2.1 Language and Semantics 



We follow the notation of pP92 |. 

We construct a bimodal propositional modal logic. Formally, we start with 
a countable set A of atomic formulae, then the language C is the least set such 
that A C C and closed under the following rules: 



We abbreviate, as usual, (p A -^(p with _L and -i± with T. The language C 
can be interpreted inside any spatial context as follows. 

Definition 1 Let X be a set and O a subset of the powerset of X, i.e. 
O C ViX) such that X G O. We call the pair {X, O) a subset space. A model is 
a triple {X, O, i), where {X, O) is a subset space and i a map from A to V{X) 
with i{T) = X and i(-L) = called initial interpretation. 

We denote the set {(x, J7) : f/ e O, and x G C/} C X x (9 with XxO. For 
each U € O let [U he the lower closed set generated by U in the partial order 
(O, C), i.e. the set {y : y e O and V C U}. 

Definition 2 The satisfaction relation |=^, where M. is the model (X, O, i), 
is a subset of [XxO) x C defined recursively by (we write x, U\=j^(i) instead of 

((x,c/),0) e Ha^) 





iff 


X e where A e A 




if 


t^hyw^ and a;, C/Ha^V' 




if 






if 


forallyeC/, y,U\=j^(t> 


x^U^j^Ucj) 


if 


for all y G jf/ such that x 



If x, U\=j^(t), for all (x, C/) belonging to XxO, then is waZirf in A4, denoted by 
M^(t>. 

The case for atomic formulae shows that we deal with analytic sentences, 
i.e. sentences which do not change their truth value. If a formula Ocj) does not 
contain K then it has the same interpretation as (j). This has also the consequence 
that the universal substitution rule does not hold. Thus, time does not affect 
the semantic value of sentences but rather the knowledge we have of them. This 
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difference makes the □ modality not collapsing to a temporal modality but being 
closer to necessity. 

We abbreviate ^D-i^ and -iK^(/) with <>((> and L0 respectively. We have that 
X, U\=j^\-(j) if there exists y & U such that y, U\^j^(j) 

X, U\^j^O(j) if there exists V & O such that V <^ U, x £ V, and x, V\=j^4'. 

Definition 3 A treelike space is a subset space (X, O) where for all U^V € O, 
either U C V^, or y C f7, or [/ n ^ = 0. A model induced by a tree space will 
be called a treelike model. 

It is clear that in the countable case the set of subsets of a treelike space 
forms a tree under the subset ordering. 

Example: Let 

X = {f \ f recursive }. 

Now, let 

[oi, 02, . . . , a„] = {/ I f{k) ^ flfc, for fc = 1, 2, . . . , n} C X, 
where ai, 02, . . . , a„ are natural numbers, and 

O = {[ai, a2, . . . , a«] | n = 1, 2, . . .} U {X}. 



Then it is easily verified, using definition 2.1, that {X, O) is a treelike space. 
Now let 1 be a predicate with 

«(1) = {/ I there exists n such that for all m > n, f{n) = 1}. 

Then the formula 

□ LI 

which translates to "it will never be known that appears infinitely often" , is 
valid in the treelike model {X,0,i). This comes with no surprise, since the 
knowledge of "infinitely often" requires an infinite amount of resources. This 
formula is an example of a refutative assertion (see introduction). 



Treelike spaces get their name from treelike frames (see |Pri67 ). A tree- 
like frame is a pair (T, <), where T is a nonempty set and < is a transitive 
ordering on T such that if ii < t and t2 < t then either ti — t or ti < t2 
or t2 < ti. Treelike frames have appeared as semantics for the Ockhamist's 
concept of non-deterministic time and been used for treating historical neces- 



sity and conditionals (sec |Tho84| and [VF81|). The validity on these frames is 



called Ockhamist validity. A treelike space is a special form of a treelike frame 
where the temporal instants of the frame are labeled by subsets of a space and 
whenever instants are incomparable the respective subsets are disjoint. It can be 
easily seen that the ordering among subsets is a treelike frame. The similarities 
do not end here. Let (T, <) be a treelike frame and, for each t ^ T, Bt the set of 
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maximal linear ordered subsets of T containing t, i.e. the branches intersecting 
t. Then {Bt]t^T is a treelike space. The difference lies on the interpretation of 
atomic formulae. We interpret atomic formulae on branches while an Ockhamist 
assignment interprets atomic formulae on temporal instances. This bring up an- 
other dimension of our logic. Our logic is not conservative over a logic which 
interprets □ as F (the "future" modality) for if contains no occurrences of K 
then □(/) is valid in a treelike space exactly when is. We adopt the indeter- 
minist's view of necessity (knowledge). Although may be true in our world, 
K0 may be false. This is because there is no special world in our view which 
deserves to be called actual. Setting apart Ockhamist validity, treelike spaces 
are more general than treelike frames (and their derivative T xW frames) due 
to the fact that we do not assume an overall temporal ordering. In this sense 
treelike spaces are closer to a more general structure, first introduced by Kamp 
and subsequently called Kamp frames, where worlds do n ot parti cipate in the 
same temporal structure (for definition and discussion see |Tho84 |). In fact, it 



is easily seen that treelike spaces are equivalent to Ockhamist frames introduced 



by Zanardo in | Zan85 for the completeness of strong Ockhamist validity. At any 
rate, our work seems to have more than superficial links with work in historical 
necessity and questions such as what the connections between the two notions 
of validity are should be the subject of a more systematic investigation. 

2.2 MP and MP* 

We saw that the semantics of the bimodal language is interpreted in any pair 
{X, O) . What happens when we allow O to be any class of sets of subsets? If O 
is an arbitrary set of subsets then the system MP is complete for such subset 
spaces. The axiom system MP consists of axiom schemes |^ through |l^ and 
rules of Table |^ (see page ^ and appeared first in |MP92]. 
The following was proved in | MP92| |. 



Theorem 4 The axioms and rules o/MP are sound and complete with respect 
to subset spaces. 

If O is a complete lattice under set-theoretic union and intersection then the 
system MP* is canonically complete for this class of subset spaces. The axiom 
system MP* consists of the axiom schemes and rules of MP plus the following 
two additional axiom schemes: 

000 004) 

and 

O(K0 A V') A LO(K0 A x) ^ O(KO0 A OV' A LOx). 

The first axiom is a well-known formula which characterizes incestual frames, 
i.e. if two points (3 and 7 in a frame can be accessed by a common point a 
then there is a point 5 which can be accessed by both (3 and 7. The second 
characterizes union. 



The following was proved in |Geo93 
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Theorem 5 The axioms and rules o/MP* are sound and canonically complete 
with respect to subset spaces, which are complete lattices. 



The proof of the above theorem was later shortened and improved through 
an elegant embedding of S4 (and therefore intuitionistic logic via the Godel 
translation) by Dabrowski, Moss and Parikh in |DMP]. This translation reveals 



that truth in intuitionistic logic coincides with "possibility of knowing" in our 
system. It also r eveals a con nection with another line of work, that of Fischer 
Servi. In | FS80 | and [ FS84 the semantics and syntax of the family *-IC of 
intuitionistic modal logics is studied. This family is is naturally embedded via 
the Godel translation to the family (S4-*) of bimodal logics, where S4 is always 
one of the coordinates (like in our case). However, the semantics called double 
model structures (birelational modal frames) deviate from our space theoretic 
framework; a fact that declares itself on the presence of different connecting 
axioms, i.e. axioms involving both modalities. 



3 The system MPT 

We add the axioms |ll] and [ij to form the system MPT for the purpose of 
axiomatizing treelike spaces. 

A word about the axioms (most of the following facts can be found in any in- 
troductory book about modal logic, e.g. | Che8C( | or |Gol87|.) Axiom ^ expresses 



the fact that the truth of atomic formulae is independent of the choice of subset 
and depends only on the choice of point. Axioms |^ through ^ and Axioms |^ 
through ^ are used to axiomatize the normal modal logics S4 and S5 respec- 
tively. The former group of axioms expresses the fact that the passage from one 
subset to its restriction is done in a constructive way, as actually happens in an 
increase of information or a spending of resources (the classical interpretation 
of necessity in intuitionistic logic is axiomatized in the same way). The latter 
group is generally used for axiomatizing logics of knowledge. 

Axiom |l^ expresses the fact that if a formula holds in arbitrary subsets is 
going to hold as well in the ones which arc neighborhoods of a point. The 
converse of this axiom is not sound. 

Axiom |ll| is a well-known axiom which characterizes reflexive, transitive and 
connected frames, i.e. if two points /3 and 7 in a frame can be accessed by a 
common point a then either /3 accesses 7 or 7 accesses P (or both). 

Soundness of A xioms [l| through ^ has already been established for arbitrary 



subset spaces (see |MP92| ). The soundness of Axiom |l^ is easy to see, since the 



subset frame (see [ Geo93| ), i.e. the birelational modal frame, of a tree model is 
connected. 

Proposition 6 The axiom [IJ is sound. 
Proof. We shall show soundness for the equivalent formula 
aK(t) A OL(V' A □(/)) 1(0-0 A 



8 



Axioms 

1. All propositional tautologies 

2. {A -> OA) A i^A -> a^A), for A e A 

3. □((?!) -^ip) ^ (□(?!) □■0) 

4. □(/) ^ 

5. aocj) 

6. K{(t> ^ V) ^ (K0 ^ KtA) 

7. K(?!)->0 

8. K(t>-^ KK<j) 

9. KL(t> 

10. Kn</> ^ DK^ 

11. □(□(/) ^ ■(/;) V □(□?/; ^ 0) 

12. aK(j) A K(n(/) ^ □V') □K(n0 ^ □V') 

Rules 



-0, 

MP 



K-Necessitation D-Necessitation 

K(h 06 



Table 1: Axioms and Rules of MPT. 



Let X, U^aK(f> A OL(V' A □(/)). Then there exists V <Z U such that x, V\=L{tp A 
□0). This implies that there exists y ^ V such that y, V\=iIj Now, observe 

that y, U\=0(j). For, if C [/ and y e then there are two cases. Either 
W CV and y, W\=(f>, since y, C/|=n0, and we are done, or C C/ and W %V 
so we have V C W C U, since the subsets containing y are linearly ordered. 
In this case, we have x G W, since a: G F. By our assumption x,U\=OK(j), 
we have x, W\=K(j). So y, W\^(j). Now, y € U and ?/, [/!=□(/!) imply together 
2/, t/hOV' A □(?!). I 

Note that Axiom ^ follows from Axiom |l^ (substitute with T) . Axiom ^ 



9 



has a particular interest; if we replace K with the universal quantifier it becomes 
the well-known Barcan formula 



Vxn0(x) — » □Vx0(x). 

Our system (and therefore MP and MP*, since this formula belongs to their 
axiomatization) can be thought as a propositional analogu e of a f irst order modal 



system interpreted over varying restricting domains (see [ Fit93 ) 



3.1 Completeness 

Our proof of completeness is based on a construction of a treelike model which 
is (strongly) equivalent to each generated canonical submodel of the canonical 
model of MPT. 

The canonical model of MPT is the structure 

where 

S = {s C C\s is MPT-maximal consistent}, 

s^tiS{(j)e C\a(j) esjct, 

s Mff {(/) G C\K4> esjct, 
v{A) = {sGS\Ae s}, 

along with the usual satisfaction relation (defined inductively): 





iff 


s e v{A) 






iff 


s J^^cj) 






iff 


s\=Q(j) and sl^^tp 




s^f^Ocj) 


iff 


for all t e S, s ^ 


t implies t\=^ 


S^C^(f> 


iff 


for alH G S*, s ^ 


t implies t\^^ 



We write C|=0, if s^^cj) for all s G S. 

A canonical model exists for all consistent bimodal systems with the normal 
axiom scheme for each modality (as MPT). We have the following well known 



theorems (see |Che8C|, or |Gol87|) 



Theorem 7 (Truth Theorem) For all s G S and (j) E C, 

she'/' ^i? ^ 

Theorem 8 (Completeness Theorem) For all (j) G C, 

C\=^(f> iff I^MPT 4>- 
We shall now prove some properties of C. 
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Proposition 9 a. The canonical frame is reflexive, transitive and connected 
with respect to the relation — >. 

b. The relation ^ is an equivalence relation. 

c. For all s,s',t £ S, if s ^ s' t then there exists t' ^ S such that 
s^t'^t. 

d. For all s, s' £ S , if s ^ s' and s ^ s' then s — s' . 

e. The relation —> is antisymmetric. 

Proof. For Part ^ Axioms || through ^ and Axiom |ll| characterize reflexive, 
transitive and connected frames (these axioms comprise the system S4.3). 

For Part ^ K is axiomatized with the S5 axioms. 

Part ^ is an immediate consequence of Axiom 

To show Part |, let 

Is,.' = {t\s^t^ S'}, 

for aU pairs (s, s') such that s s' and s s'. 

We shaU prove by induction on the complexity of cj) that, for all pairs (s, s') 

such that s -t> s' and s ^ s' , cj) belongs to some t G Is.s' if and only if (p belongs 
to s. This shows that [Jl^^s' '~= s- Further, we have Is,s' = {s}, since s G Is,s'- 
Therefore s = s'. 

If (p is an atomic formula A and A £ t, for some t G Is,s', then <>A G s. 
Therefore, by axiom ^, OA E s. Hence, A E s. 

The cases of negation and conjunction are straightforward. 

If ^ = nip, let Oip G t, for some t G Is,s'- In particular, tp E t and by 
induction hypothesis, tp & s. Suppose, towards a contradiction, that 0^^p G s. 
Then there exists r € S such that s — > r and -^ip G r. Since the frame is 
connected, s — > s' and s ~> r imply that either s' r or r ^ s' . If s' r 
then t ^ r which is contradiction, since □V' G t and -^%p G r. If r ^ s' then, 
by induction hypothesis, -itp G s which is a contradiction, since ip E s and s is 
consistent. Hence □-!/; G s. 

If = Kt/i, let Kip G t for some t G Is.s'- Suppose, towards a contradiction, 

that L^V G s. Then there exists r <E S such that s ^ r and ^ip G r. We have 

s' ^ r, since s' ^ s. Since t ^ s' , there exists, by Part ^ r' G 5 such that 

t r' ^ r. We have ip G r', since Kip G t. Since s ^ t ^ r' , there exists, by 

Part ^, r" G S such that s r" ^ r' . Notice that r" ^ r' ^ r and r" r, 
and so r" ^r\r G By our previous assumption, we have -^ip G r and ip € r' . 

By induction hypothesis on Ir" ,ri both -1-0 and "0 should belong to r" which is 
a contradiction to its consistency. 

For Part |, we shall grove by induction on the structure of that, for all 
s,t E S such that s t s, (p E s if and only G t. 
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The cases of atomic formula, negation, conjunction and □ are straightfor- 
ward. We shall show the (f> = Ktp step. Let Kt/j G s, and suppose L^ip € t 

towards a contradiction. Then there exists r £ S such that t r and ^■0 G r. 

Since s t r, there exists p £ S such that s p r. Also, ^ £ p, since 

Kip G S. Now, since t ^ s ^ p there exists r' G 5 such that t ^ r' ^ p. This 

imglies r' ^ p —> r and r ^ r' . Therefore, by Part |^, r — r' . Thus we have 
r ^ p r with -^-ip G r and tp ^ p which is a contradiction to the induction 
hypothesis. I 

The canonical model is not a (model corresponding to a) treelike model. 
A counterexample will appear later on (see Figure However, by defining a 
number of equivalence relations, we shall be able to construct a treelike model 
equivalent to each generated part of the canonical model. 

For all t £ S, let [t] = {.s G S* | s i}, i.e. the equivalence class under 
where t belongs. Let Ck = {[i] \ t e S}. We define the following relation on Ck- 

[ti] < [^2] iff there exist si, S2 & S such that si G [ti], S2 G [^2] and S2 ^ si. 



Proposition 10 The relation < is a partial order. 

Proof. Since t ^ t, we have [t] < [t] and reflexivity follows. 

For antisymmetry, let [ti] < [t2] and [^2] < [ti] for some ti,t2 G S. Then 
there exist si, S2, s[, S2 G S such that Si,s[ G [ti], 82,82 G [t2], 82 ^ si and 
s[ ^ 82- Since S2 ^ si — ^ s'l, there exists G S such that S2 82 ^ 8^. So 
we have sj,' s'j^ ^ sj, and S2 ^2 which implies, by Proposition ^IQ), 82 — 82- 
Therefore 8[ — 82, by ^'s antisymmetry. Hence [ti] — [s'i\ — [s^ — [^2]- 

For transitivity, let [t^] < [t2] < [ti] for some ii,t2,t3 G 5*. Then there exist 
si G [ti], 82,82 G [^2], and S3 G [ts] such that si 82 and ^ ^3. Since 

si — > 52 — > S2j there exists s'l G S" such that si -'^ s'j^ ^ S2- ^'j^ ^ S3, and 
therefore [t^] = [S3] < [s[] = [ti]. 

I 

A subset X of 5, the domain of the canonical model C, is called KD-closed 
whenever 

if s G X, and s ^ < or s ^ i, then t £ X. 

The intersection of KD-closed sets is still KD-closed, therefore we can define the 
smallest KD-closed containing t, for all i G 5*. We shall denote this set by S*. 
Fix to G S. We define the model 

C*" — I^S**",^ 15*0x5*0,^ |s*o xS*o , 1'*°^ , 

where ^ |s*oxs*o, — * Is'oxs'o and are the restrictions of -'^ and v to 
S**" X S*" and S"*" respectively. We shall call this model the submodel of C 
generated by tQ. 
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Observe that if we restrict the partial order < to C*" then [to] is the greatest 
element under <. 

For each generated submodel of the canonical model, we shall construct a 
treelike model which is equivalent to it. 
For each s e 5"*" , let 

|s] = {t E [to] I there exists t' G [s] such that t ^ t'}. 

Notice that |s] C [to]. 

For each s G , we define the following relation on |s] 

ti t2 iff for all [s] < [s'], ti e [s'] iff t^ e {s'}. 

Proposition 11 For all s G , the relation ~s is an equivalence relation. 

Proof. This is because ~s inherits the properties of -t>. i 

We denote the equivalence class oft under with [t]s. We have [t]s C |s] C 
[to]. 

Let {X,0*-°) be the subset space where 

X - {t[te [to]} 

and 

0*0 = {[i], I t G |s] and s G S**"}. 
It is clear that O*" CV{X). 

Lemma 12 If[si] < [32] and t G |si] n |s2] then [t]s^ C [i]^^. 

Proof. Immediate from the definition of . 1 

To elaborate the above process, we present the following simple example. 
Example: A part of the canonical model appears in Figure ^ (Horizontal and 

downward arrows correspond to and respectively.) We would like to 

make subsets of a treelike space correspond to equivalence classes under 
Canonical model worlds related with will be represented by a single point. 
However, this model is not a treelike model: {ri, ti} and {rs, si, ti} should make 
two distinct points. To remedy that, we "trace back" each equivalence class 

under to the uppermost one. For instance, [ti] = {^1,^2} is traced back to 
[n] = {ri, 7-2, ^3, r4}. The latter forms pi]. Next, we split pi] into equivalence 
classes under i-e. [ri]t^ = {ri,r2} and [rsjt^ = {r3,r4}, since ri r2 
and ra r4. Finally, we replace [ti] with as many copies as these equivalence 
classes (see Figure ||). The infinite case is taken care of by Lemma ^ The 
resulting space (of Figure ||) is a treelike space. Note that we could have replaced 
this procedure by one that employs maximal branches but we find the present 
one simpler. 
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n r2 ^3^^ ji r5 re 

S3 




t'l t2 



Figure 2: A generated submodel of the canonical model. 

Proposition 13 The subset space {X,0*°) is a treelike space. 

Proof. Suppose [iij^i n [t2]s2 0- Let t e [ti]si n [i2]s2- We have either 

<> O ■ , ^ I , ^ I r /rii/ri 

Si S2 or S2 Si, since t — > Si, t Sji tor some Si £ [sij and S2 G [S2J, 
and the canonical frame is connected. The former implies [si] < [32]- Thus, by 
Lemma|l^, [iij^j = C [t]g^ = [t2]s2- Similarly, the latter implies [t]s2 C [ij^i- 
I 

Let {X, 0*° , i) be the treelike model where X and 0*° are as above, and 
i{A) — where v*" is the initial interpretation restricted on C*°. 

An element of X x O*" can have more than one representation. In order to 
prove the semantical equivalence we are opting for, we shall choose a canonical 
representation. So, given a pair (t, [t']s') G XxO*° , its canonical representation 

is (t, [t]s) where s is such that t ^ s s'. Its existence is assured by the 
definition of [t']s' and uniqueness by Proposition From now on, we shall 

use the canonical representation wherever is possible. 

Lemma 14 Let t e [tp] and s G S**" such that t ^ s. Then for all s' G [s] there 
exists t' G [to] such that t' —^ s' and t t' , i.e. t' G [t]s. 

Proof. Let 

{ti}iei 

be the linear order of all members of S*° under ^ such that t ^ ti ^ s. 
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Xi 



^2 C' 



X3 



Figure 3: The treelike model corresponding to Figure || 

Now, let 

T' = {Oil; I V G s'} 
U {x I Kx e 

U {Ooj I e ti, for some i e /} 

u {n4> I DK^ e t and 00 e «'}. 

T' is consistent. For if not, then there would be tp, wi, 0^2, ■ • ■ , (jJ-m Xi 4' as above 
with 11,12, ... ,in & I and ii < 12 ^ ■ ■ ■ l£ in such that 



MPT 



Oip A /\ OcJk A X ^ 



fe=i 



Thus 



MPT 



K I 0-0 A /\ Owfe A X O-'0 



fc=i 



We shall prove that the negation of the above formula belongs to t and reach a 
contradiction. Since t/j A Ocf) e s' , we have L(V' A e s. Hence 

Observe that DK^ e ii^ so, by applying axiom [l^, we have 

L(OV' A □<?!>) et,,. 

Since Kwi G ti^ , we have 

L(0?/; A wi A e tj^. 
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Also, DKt/) 6 and 

OL(O-0 Acji A □</«) e ti^. 

So, by axiom |l2|, 

L(0{0-4> Aloi) AOcj,) £U^. 

Since Kw2 G ^12: have 

L (0-0 A W2 A OtJi A 00) e 

Also, DK^ e and 

OL (OV' A tJ2 A Owi A □(/)) e . 

So, by axiom |l2|, 

L (0(0?/; A tJ2 A Ocji) A □(/>) G , 

i.e. 

L {Oip A Oa)2 A Owi A □</«) £ . 
Arguing this way and by repeated applications of axiom n3 we have 



L A f\ OuJk A n^j e i. 

Since Kx £ i, we have 

L A /\ Owfc A X A D^^ e t 

which is the negation of the formula that MPT proves. Therefore T' is consis- 
tent. Let t' be a maximal extension of T' . 

We shall show that t' is the required theory of the lemma. We begin by 

showing that if t' ^ r' ^ s' then r' ti, for some i £ I, i.e. t G |r']. So 
suppose that t' ^ r' ^ s' . If r' = s' we are done. If not, let 

i?= {?M D^/; G t} U {Lx I X G r'}. 

R is consistent. For if not, then there would be ip and x as above such that 

l-MPT ^ -'LX- 

Since r' ^ s' and r' ^ s', there exists x' G such that n-ix' G s'. Let 
= X A x'- Observe that □-'(x A x') G s' , i.e. D-i^ e s', and £ r'. Further, 

l-MPT -0 ^ -'I-(X A x'), 

i.e. 

f-MPT ■0 ^ "'L'^, 
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and therefore, 

hjviPT I^V' ~^ OK-icj). 

Now, we have DK^cj) £ t and □-!</) S s' , since □-0 g i. By definition of T' above, 
we have D-i^ G T', and therefore □-!</) e (t' is an extension of T'). In this 
case, -10 £ r' which is a contradiction. Therefore R is consistent. So a maximal 
extension r of i? has the property i — s- r — > s. Hence r — ti, for some i G I. 
We must now prove that G pi], for all i e /. Let 

7^' = {V^ I □V' e t'} U I Kw e t J. 

T/ is consistent. If not, then 

l-MPT ■0 -'W, 

for some and w as above, which implies 

l-MPT ^■0 n-iw, 

i.e. 

Kmpt ~* -''Olu. 

So -lOtj G t' , since DtA G i'. But, by definition, Ouj <E T' C t' which is a 

contradiction. Therefore a maximal extension t'^ of T/ is such that t' ^ t[ ^ ti. 
Hence G pi]. 

Combining the above proofs we have t ^gt' ■ 

I 

We now have the following theorem. 
Theorem 15 For all s G S**" and t E X such that t ^ s, 

ck^S iff t,[<]sM- 

Proof. By induction on the structure of 0. For an atomic formula A, we have 
that t G i{A) if and only if s G i{A) — v^'^{A), i.e. AGs, because of Axiom |^ 
and t —> s. 

Negation and conjunction are straightforward. 

Suppose = O^jj. Let □?/; G s and t, [tJ^^O-i?/;, for some s and t as in 
the theorem's statement. This implies that there exists s' G S**" such that 
[t]s' C [t]s, t s' and t, ^-iV"- By induction hypothesis, ^tp G s'. We 
have now that t s and t ^ s' which, by connectivity, implies either s' — > s 
or s ^ s' . In the former case, we have [s] < [s'] and hence, by Lemma 
[t]s Q [t\s'- So [t]s = [t]s'- Therefore s = s', by Proposition ||(^ , which is a 
contradiction to our hypothesis (0 G s). In the latter case, we have s ^ s' 
which again contradicts our hypothesis (0 G s). 

For the other direction, suppose that t, [t]s\=Oip and O-i0; G s for some s 
and t as above. Then there exists s' G S*° such that s ^ s' and -i'0 G s'. Thus, 



17 



t, [t]s'\=^ip by induction hypothesis. Moreover [t\s' C [t\s by Lemma |T^, which 
is a contradiction. 

li (p = Ki/), let Kt/i e s and suppose t, [fJ^^L-i-f/j, for some s and t as in 
the theorem's statement, towards a contradiction. Then there exists t' G 
such that t' , [t]s\=^ip, i.e. t', [t']s'\=^ip, for some s' £ 5*" such that t' ^ s' and 

s' -^^ s, which is a contradiction. 

For the other direction, suppose that t, [t]s^Kip and L^ip G s, for some s 

and t as above. Then there exist s' e S"*" such that s ^ s' and -it/j G s'. By 
Lemma there exists t' G [t]s such that t' ^ s' . Then we have t', [tJs^^V by 
induction hypothesis. Therefore i, [iJ^^^K^/; which is a contradiction. 



Combining now Proposition O and Theorem 15 we have the foUowing 



Corollary 16 The system MPT is complete with respect to treelike spaces. 
3.2 Decidability 

For each treelike model and formula </>, we shall construct an equivalent finite 
subset space of bounded size with respect to the complexity of 4>. This is a kind 
of "semantic" filtration, based on geometric properties of treelike models, using 



a technique first introduced in [Gco94a| 



In the following we assume that (X, O) is a treelike space. Our aim is to 
find a partition of O, where a given formula "retains its truth value" for each 
point throughout a member of this partition. It turns out that there exists a 
finite partition of this kind. 

First we need some definitions. (Note that the following hold, although we 
refer to a treelike space O, for an arbitrary family of subsets oi X.) 

Definition 17 Given a finite family T = {Ui, . . . , [/„} C 'P{X), i.e. of subsets 
of X, we define the remainder of (the principal ideal in (O, C) generated by) 
Uk by 

where [Uk ^ {V e O \ V (Z Uk}- Note that Rem^Uk C O (but not necessarily 
Uk e O). 

Proposition 18 In a finite family T = {Ui, . . . ,Un} C V{X) closed under 
intersection, we have 



fori = l,...,n. 



' 
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Proof. 




We denote {jij.^jr Wi with [T. 

Proposition 19 If J- = {Ui, . . . , Un} is a finite family of subsets of X closed 
under intersection then 

a. Rem^Ui n Rem^Uj = 0, for i ^ j, 

b. lj"=i RertT^J/i = IT, i.e. {Rem^Ui}f^i partition of \T . From now 
on we shall call a finite family of subsets J- closed under intersection a 
finite partition (of i^), 

c. ifVi,V2 e O, Vi € Rem^Ui and Vi C V2 C [/, then V2 G Rem^U,, i.e. 
RerrT^C/j is convex, 

d. if {V.j}jeJ C Rem^Ui then [j.^, C Ui. 

Proof. Parts ^, ^ and ^ are immediate from the definition. 

For Part ^ suppose that V e then V G RenT^ C\veiU, U,. I 

Every partition of a set induces an equivalence relation on this set. The mem- 
bers of the partition comprise the equivalence classes. We denote the equivalence 
relation induced by J- by ~jf. 

Definition 20 Given a set of subsets Q, we define the relation ~g on O with 
Vi ^'g V2 if and only iiViQU-^V2QU for all U (^Q. 

We have the following 
Proposition 21 The relation ~g is an equivalence. 

Proposition 22 Given a finite partition J- , we have ^'jr=^j= i.e. the remain- 
ders of T are the equivalence classes of^'jr. 

Proof. Suppose Vi V2 then Vi and V2 belong to Rem'^U where 



For the opposite direction, suppose Vi,V2 G Rem U and there exists U' ^ T 
such that Vi C U' while ^2 2 C/'- Then we have Vi C [/' n t/, J7' n J7 G and 



U ^{^{U'\Vi,V2'ZU, U' eT}. 



nU CU i.e. Vi ^ Rem-^U. 
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Proposition 23 IfQ is a finite set of subsets of X then C\{G), its closure under 
intersection, is a finite partition for IQ. 



The last proposition enables us to give yet another characterization of re- 
mainders: every family of points in a complete lattice closed under arbitrary 
joins comprises a closure system, i.e. a set of fixed points of a closure operator of 



the lattice (cf. |GHK+8C|.) Here the lattice is the powerset of X. If we restrict 
ourselves to a finite number of fixed points then we just ask for a finite set of 
subsets closed under intersection i.e. Proposition |2^. Thus a closure operator in 
the lattice of the powerset of X induces an equivalence relation to any family of 
subsets of X. Two subsets are equivalent if they have the same closure, and the 
equivalence classes of this relation are just the remainders of the subsets which 
are fixed points of the closure operator. 

We now introduce the notion of stability corresponding to what we mean by 
"a formula retains its truth value on a set of subsets" . 

Definition 24 Let Q Q O then Q is stable for <j), if for all x, either x, V\=4> 
for all V eg,oi X, V^^(j) for aU V eQ. 

Proposition 25 Let Qi,Q2 C O then 

if Qi Q G2 o,nd Q2 is stable for (f> then Qi is stable for (p, and 
b. if Qi is stable for cf) and Q is stable for x then Qi H Q2 is stable for (j) /\X- 
Proof. Part ^ is easy to see while Part ^ is a corollary of Part ^ 1 

Definition 26 A finite partition !F — {Ui, . . . , Un] is called a stable partition 
for 4>, if RenT^[/i is stable for cj), for all Ui G J-. 

Proposition 27 If J- — {Ui, . . . , Un} is a stable partition for (j), so is 

T' = CI({C/o,C/i,...,i7„}), 

where Uq G IJ-'- 

Proof. Let V e J^', then there exists Ui ^ T such that RenT^ V C RenT^C/; 
(e.g. Ui — (}{Ui\Ui ^ 3-,V ^ Ui}), i.e. J-' is a refinement oi T . But RerrT^J/; is 
stable for cj) and so is Rerrr^ V by Proposition p5|(|a|). 1 

The above proposition says that a finite stable partition for a treelike space 
O remains stable if we "refine" it. 

The following is the main theorem of this section. It says that for each 
formula <f> we can find a stable partition for <j) which is essentially a refinement 
of the stable partition corresponding to the subformulae of (j). 

Theorem 28 (Partition Theorem) Let AA ~ {X, O, i) be a treelike model. 
Then there exists a family {.F'^j^g^ of finite stable partitions such that if (f> is 
a subformula of tp then J-'^ C T''^ and is a finite stable partition for ip. 
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Proof. By induction on the structure of the formula ip. In each step we refine 
the partition of the induction hypothesis. For each U G JF'^, let = {x G 

U : x, U\='ip}. This set determines completely the satisfaction of ip on RertT^ U 
whenever is stable. 

• If -0 = yl is an atomic formula then = {X} — {i{T)}, since O is stable 
for all atomic formulae. Wc have = i{A). 

• If -0 = ~^4> then let = T"^, since the statement of the theorem is 
symmetric with respect to negation. We also have U"^ — {X ~ V^) fl C/, 
for all U gT'I'. 

• If = X /\ 0; let 

Observe that U T'l' C T^^'f'. Now, is a stable partition for x A 
containing X, since it is a refinement of both JTX and T'^. Thus, is a 
finite stable partition for ip containing X. 

• Suppose ip — K(j). Then, by induction hypothesis, there exists a finite 
stable partition JT"^ = {Ui, . . . ,Un} for (p containing X. 

Now, if y e Rem^'^U, n lUf, for some i E {1. . . . ,n}, then x, V\=(f>, for all 
X € V, by definition of uf. Hence x,V\=K(f>, for all x E V. 

On the other hand, if G Rem'^*[/j — luf then there exists x E V such 
that a;,y|=^(/) (otherwise V C Uf). Thus we have x,V\=^K(f>, for all 

X eV. Hence RerrT^^C/; n lUf and Rem^V, - lUf are stable for K0. 
Thus the set 

F = {Rem^U,\Uf ^Rem^UijU 

{Rem^C/j - if//, Rem^C/j n iuf\ uf E U,} 

is a partition of O and its members are stable for K(j>. Let 

We have that T^'*' is a finite set of opens and J^"^ C JT*^"^. Thus J^*^"^ 
is finite and contains X. We have only to prove that T^'^ is a stable 
partition for K(f), i.e. every remainder of an open in JT*^"^ is stable for K<^. 
But for that, observe that is a refinement of F. Therefore jF*^* is a 
finite stable partition for K0, using Proposition [2^(|a|) . 

Now, ifU EJ^'f' then either U^'t' = [/ or U^'t' = 0. 

• Suppose tp — 0(f). Then, let 

where T'^ is a finite stable partition for by induction hypothesis. 
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We shall show that T'^ is also a finite stable spitting for O0. Pick U S T'^ 
and X G U. If x, V\=^(j), for all V C U such that x e V, we are done, 
since a;,y^^O(/). If a;,y|=0, for some V G RenT^ J7, then x,W\=^(l), for 
aU ly e Rem-^^C/, since J^"^ is stable for Therefore x,iy|=O0 for all 
W e RertT^^C/. If x, V^cj), for some F C [/ with V ^ RertT^^f/, then we 
have V C W, for all W £ RertT^ U, since the set of subsets containing x 
is linearly ordered and Renr^ U is stable and convex. Hence x, W\=Oct), 
for all W e Rem^V. 



The following corollary is "folklore" . 
Corollary 29 The formula OOcf) —^ 00(f) is sound in treelike spaces. 

Proof. Let x, Ul^aOtp in some model {X, 0,i). 

By the Partition theorem, there exists a finite stable partition J- for (j). 
Further, there \s a.V J- which is "the least" in the following sense: if W G 
O contain x,W G RertT^y, and W' QW then we will also have W S RertT^y. 
The existence of such a set V is assured by the fact that T is finite, the members 
of the partition which T induces are convex, and the set of subsets in O which 
contain x is linearly ordered. Moreover, RerrT^y contains at least one subset 
which contains say W . 

Now, we have either U V ov V Q U . In the former case, we have 
U S RerTT^y. Hence x, as Rerrr^y is stable for ip. In the latter case, 

X, W\=<>(f>, since W C V C U . Thus we have x, W\=0(j) for the same reasons as 
above. Hence x, U\^00(j). i 

A finite partition does not have a treelike form. Therefore we cannot perform 
a filtration in a direct manner. First, we shall consider no partition member 
(remainder) that contains no subset belonging to the initial treelike space. Next, 
we shall impose a relation < among the remaining members (Definition |3.2D . 
Two remainders will be related just in case they contain subsets with common 
elements. This relation is not a partial order. However, it respects the initial 
treelike ordering (Lemma ^ through p5|) . Finally, using a number of equivalence 
relations based on <, one for each member of the partition, we shall construct a 
treelike model equivalent to the initial one (Propositions |3^ and |39|) . Moreover, 
the underlying space of this model will contain a finite number of subsets. 

By the Partition theorem, given a treelike model {X, O, i) and a formula </), 
there exists a finite partition T'^' on O stable for </>. For each U £ J^*^, let 

U = |jRem^*[/ 

and 

= {C/ I C/e J^-^and C7^0}. 

We have the following 
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Lemma 30 IfUi, U2 G ^^"^ with Ui CU2, and Vi,V2 e O with Vi E Rerrr^ Ui, 
V2 e Rem-^Va and VinV2^ 0, then Fi C V2. 

Proof. Since Vi n V2 7^ 0, then, by connectedness, we have either Vi C V2 
or V2 ^ Vi . If C V2 then T/i C V2 since they belong to distinct equivalence 
classes. If V2 C Vi then we have 1^2 C C {7i C f/a. Hence Vi e Renr^ (72, by 
Proposition 19 I 

Definition 31 Let < be the following relation on JF'^ 

Ui<U2 iff FTnCJa ^ 0, and 

for aU x,Vi,V2 such that x eUinTh, Vi e RenT^ Ui with a; G 14, 
and V2 e RerrT^^L/a with a; £ V2, Vi CV2. 

Clearly, we cannot have Ui < U2 and U2 < Ui. Let Ui < U2, if either 
Ui = U2 or C/i < i72. 

The following lemma allows us to weaken the conditions of the definition of 

<. 

Lemma 32 Let C/i, C/2 £ T'f' with Ui ^ U2. If there exist x eUi nlh and 
Vi G RertT^*[/i, V2 G RertT^*[/2 with x G Vi n V2 smc/i i/iaf Vi C V2, </ien 
?7i < U2. 

Proof. Suppose, towards a contradiction, that for y E Ui D U2 there exist 
Wi G Rem-^*C/i and W2 G Rem-^*[/2 such that y EWinW2 and 11/2^1^1. By 
our hypothesis, Ui ^ U2 and Vi C V2, and so we have U2 % U\. This implies 
that Rem U2 n = 0. Therefore W2 ^ Rem U2 which is a contradiction. 
Thus W^i C 1^2. Hence J7i < C/2. ■ 



Lemma 33 Let Ui, U2 G J"^ . // C/i n [/2 ^ i/ien C/i < U2 or C/2 < C/i. 

Proof. Suppose that Ui ^ U2 and let x E Ui 1/2. Let Pi E Rem-^*C/i and 
V2 G Rem'^ C/2 such that a: G Vi fl V2- Since O is a treelike space, we have either 
Vi C V2 or V2 C Vi. Suppose that the former holds. Since Ui ^ C/2, we have 
Vi C ^2- By Lemma ||, C/i < C/2. Similarly, if V2 C then C/2 < C/i. I 



Lemma 34 < is reflexive and antisymmetric. 

Proof. Reflexivity is straightforward. For antisymmetry, suppose that C/i fl 
C^ 7^ 0, C/i < C/2 and C/2 < C/i. If C/i ^ C/2 then we have C/i < C/2 and U2 < Ui 
which is a contradiction. I 

Instead of transitivity, we have the following property of <: 

Lemma 35 Let C/i, C/2, U3 E . If Ui < U2, U2 < U3 anrf 17^ n CTa n CTg ^ 
then C/i < C/3. 
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Proof. If either Ui = U2 or U2 ~ U3 we are done, so suppose that Ui < U2 
and U2 < U3. Let X elh nlh riTh, Vi e Rem'^'*J7i and V3 S Rem^'^Us such 
that X ^ Vi and x e V3. Since x e 172, there exists V2 € RerrT^ U2 such that 
X e V2. Also, we have Vi C V2 C V3, since t/i < t/2 and U2 < U3. So, by 
Lemma m, Ui < U3. I 

Since C is finite. Let = {f/i, C/2, . . . , C/„}, for some n. Now, 

let ~i be the following equivalence relation on Ui 

X y iff for all Uj,j G {1, 2, . . . , n} such that C/^ < Uj, 
X eU] iS y elJ^. 

We denote the equivalence of a: under ~i with [x]i. Observe that the number 
of equivalence classes is finite, since it depends only on the number of members 
of the partition. 

Lemma 36 Let Uk, Ui e T^, fc, Z e {1, 2, . . . , n}, with U^nU'i^'I). Then 

a. if Uk < Ui then [x]k ^ [x]i , for all x E Uk r\ U, and 

b. if [x]k C [x]i, for some x e Uk r\ Ui, then Uk < Ui. 

Proof. For Part |^ if C/j, Ui then we are done. Suppose Uk < Ui and let 
z e [x]k- Let Um e T'f', TO e {1, 2, ... , n}, be such that Ui < Um- If x G Um 
then x G Uk r\Ui n Um- So, by Lem ma |35| , Uk < Um- So z G Um, since x z. 
For the other direction, suppose z G Um- Then we have z Ui, since Uk < Ui 
and X z. So 2: G Uk ClUi Cl Um- Hence, by Lemma Uk < Um- Also, 
X G Um, since a; ~i z. Therefore z G [x]i. 

For Part ^ we have either Uk < Ui or Ui < Uk, since Uk fl C/; ^ 0. Suppose 
the latter towards a contradiction. Then, by Part |^ and Lemma |3[ we have 
[x]i C [x]k which is a contradiction to our hypothesis. I 

Lemma 37 Let Uk, U G T^k, l_e {1,2,..., n}, with ThnTTi^lJ). If Uk < U 
then [x]k C [a;];, for all x G Uk r\Ui. 

Proof. By Lemma p6|(p|), we have [x]k C [a;];. Suppose [x]k = [x]i. Let 
V G Rem^'^U, such that x e V. We have V C [a;]^. Thus V C [a;]^ C Jj^. 
So, for each y E V , there exists Vy G Rerrr^ Uj such that Vj, C V . But then 
^ — V]y£v ^ RertT^'''[/j which is a contradiction, since Ui i^Uj. I 

Now, let 

[^^] = {[a;], I X G C7i, i G {1, 2, . . . , n}}. 

Proposition 38 The subset space {X, [T'^]) is a treelike space. 
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Proof. First notice that X e T'f', since X e T'^ . Thus X = lJi^, for some 
io G {1, 2, . . . , n}. Moreover, x y, for all x,y ^ X. Hence X = [x]ig G [^'^]- 
Now, let [x]i n [y]j ^ 0, for some x € Ui and y G Uj. Let z € [a;]i ft [yjj. We 
have [x]i = [z]i and [y]j — [z]j. Further, z € Ui and z £ JTj, i.e. Ui fl JX,- ^ 0. 
So, by Lemma we have either Ui < Uj or Uj < Ui. By Lemma p6|(a), we 
have either [z]i C [z]j or [zjj C [z]i, respectively. Therefore either [x]i C [y]j or 

Mi ^ Ni- ■ 

Let AT = {X, be the treehke model where i{A) = {[x]i \ x e 

Proposition 39 For all x G X , V G O and G C such that ip is a subformula 
of 4>, ifVCz Rerrr^ Ui, for some i G {1, 2, . . . , n}, then 

X^V\=M^ ^ff X,[x\i^j^ll}. 

Proof. By induction on the complexity of cj). The only interesting case is that 
of = □V'- Suppose x, [a;]i ^0-1-0 but x,V\=j^Utl}, for some V £ Rem'^'^?7i. 
The latter implies that there is j G {l,2,...,n} such that x,[x\j^^ilj and 
[x\j C [x\i. We have x, [x\i\=il^, by x,V\=j^^4' and induction hypothesis. Hence 
[x]j C [x\i. By Lemma ^(b), we have Uj < Ui. By induction hypothesis, 

we have x, V'\=j^^ip, for all V' G Rertr^ Uj such that x G V. Also, we have 
V C V, since < J7i. Hence x,V\^j^^^p, a contradiction. 

Now, suppose 2;, [a;]i|=n-0 but x,V\=j^0^ip, for some V G Rem Ui. So 

there exists V^' G Rem^^ Uj such that a; G V , V C V^, and x, V'^j^^ifj. Also, 
X, [xJi^V-' so, by induction hypothesis, x,V\=j^'ip. The latter implies t/i 7^ ?7j, 

since RenT^* [/^ is stable for ip. Therefore we have Uj < Ui. Hence, by Lemma 
[x]j C [x]i. Thus x,[x]j\=^'4'j by induction hypothesis. Hence x,[x]i\='0'-iip, a 
contradiction to our hypothesis. 

I 

Constructing the above model is not adequate for generating a finite model, 
since there may still be an infinite number of points. It turns out that we only 
need a finite number of them. 

Let Ai = {X, O, i) be a treelike model, and define an equivalence relation ~ 
on X by X ~ 2/ iff 

1. for aU [/ G O, X G [/ iff y G U, and 

2. for aU atomic A, x G i{A) iff y G i{A). 

Further, denote by x* the equivalence class of x, and let X* = {x* : x G X}. 
For every t7 G O, let U* = {x* : x G U), then O* ={[/*: C/ G O} is a 
treelike space on X* . Define a map i* from the atomic formulae to the powerset 
of X* by i*{A) = {x* : x G i{A)]. The entire model M hfts to the model 
M* = {X*,0*,i*) in a well-defined way. 
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Lemma 40 For all x, U, and <f>, 

Proof. By induction on 0. I 

Theorem 41 // cj) is satisfied in any treelike space then cj) is satisfied in a finite 
treelike space. 



Proof. Let M = (X, O, i) be such that, for some x e U e O, U\= 



Let J-'^ be a finite stable partition (by Theorem 28) for cj) and its subformulae 
with respect to M. By Proposition |3|, x,U\=jtj-(t), where TV = {X,!F,i). We 
may assume that is a treehke space, and we may also assume that the overall 
language has only the (finitely many) atomic symbols which occur in (j). Then 
the relation ^ has only finitely many classes. So the model Af* is finite. Finally, 
by Lemma x*,U* cj). I 

Observe that the finite treelike space is a quotient of the initial one under two 
equivalences. The one equivalence is on the elements of the treelike space and 
the number of equivalence classes is a function of the complexity of (j). The other 
equivalence is on the points of the treelike space and the number of equivalence 
classes is a function of the atomic formulae appearing in (j). So the overall size of 
the (finite) treelike space is bounded by a function of the complexity of (p. Thus 
if we want to test if a given formula is invalid we have a finite number of finite 
treelike spaces where we have to test its validity. Thus we have the following 

Theorem 42 The theory of treelike spaces is decidable. 
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